Use of ACF2 GSO record ETAUDIT with IBM zSecure

Products

• ACF2 - z/OS

Issue/Introduction

Can ACF2 GSO record ETAUDIT be used for IBM zSecure product? 

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

ACF2 GSO ETAUDIT record cannot be used with IBM zSecure Audit product.

 

Additional Information

ETAUDIT|NOETAUDIT
Specifies whether notifications of security events are sent from this node to the ACF2 product. The default is NOETAUDIT. The GSO ETAUDIT record should also be inserted. This record specifies which security events are monitored.
If ETAUDIT is specified, other requirements must be met for the successful transmission of security events to ACF2. The ENF SNMP monitor program and the ACF2 Client component must be installed at the appropriate levels and the ENF SNMP monitor task must be running. The policy must be configured to receive event notifications from ACF2.